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IN THE CLAIMS: 
1-15. (canceled) 

16. (currently amended) In an appliance communication network, a method for 
authenticating appliance messages, the method comprising: 

maintaining at an appliance communication center a first shared message counter that 
counts messages communicated between the appliance communication center and a first 
appliance, the first shared message counter shared between the communication center and the 
first appliance; 

maintaining at the appliance communication center a second shared message counter 
that counts messages communicated between the appliance communication center and a 
second appliance, the second shared message counter provides a count separate firom a count 
provided by the first shared message counter; 

generating a first authentication word by applying an appliance message, a shared 
authentication keying variable, and the first shared message counter, as stored in the 
communication center, to an authentication algorithm; 

transmitting the appliance message and the first authentication word as an 
authenticated message to the first appliance;-aHd 

changing, within th e first appliance, tho shared authentication keying variabl e b y 
installing a master keying variable within the first appliance and the appliance 
communication cente r, wherein tho shared auth e ntication k e ying variable is us e d to g e n e rate 
a s e cond auth e ntication word configur e d to b e compar e d with th e first auth e ntication word to 
authenticate the appliance message, tho second authentication word is differ e nt from th e 
applianc e m e ssag e; 

applying the shared authentication keying variable and the master keying variable to 
the authentication algorithm to generate a new shared authentication keying variable; and 
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authenticating the appliance message using the new shared authentication keying 
variable . 

17. (previously presented) The method of claim 16, further comprising: 
receiving the authenticated message at the first appliance; 

applying a third shared message counter, as stored in the first appliance, and the 
appliance message to the authentication algorithm to generate the second authentication 
word; and 

comparing the first authentication word and the second authentication word to 
determine authenticity of the authenticated message. 

18. (previously presented) The method of claim 17, further comprising 
incrementing the third shared message counter, as stored in the first appliance, after receiving 
a genuine authenticated message at the first appliance. 

19. (original) The method of claim 16, wherein applying comprises applying an 
authentication keying variable, K. 

20 (currently amended) The method of claim 19, wherein applying comprises: 

establishing a working register R, comprising at least bytes RO, Rl, R2, R3; 

initializing R3 to a directional code, representing a transmission fi-om the appliance 
communication center to the first a pplianc e appliance ; 

initializing at least R2, Rl, and RO to a plurality of bytes C2, CI, and CO of the first 
shared message counter, as stored in the communication center, respectively; 

iteratively performing at least one arithmetic, logical and shifl;ing operation on R; and 

setting the first authentication word equal to the value contained in R. 
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21. (previously presented) The method of claim 20, wherein iteratively 
performing at least one arithmetic, logical and shifting operation on R comprises iteratively 
performing, as many times as there are bytes in K, the steps of: 

establishing an index, equal to the greater of: 

a non-zero constant; and 

a number of bytes in the appliance message less one; 
and 

iteratively performing, a number of times equal to the index plus one: 
forming P as a dot product of R2 and RO; 

forming Q as a bitwise exclusive or of P with a constant expression 'OIOIOIOT; 

forming S by adding Q to K; 

forming S by end around rotating S; 

forming T as the bitwise exclusive or of S and R3; 

forming F as the bitwise exclusive or of T with a byte of the appliance message; and 
replacing R3 with R2, R2 with Rl, Rl with RO, and RO with F. 

22. (original) The method of claim 21, wherein the non-zero constant is at least 3. 

23. (canceled) 

24. (previously presented) The method of claim 16, further comprising 
incrementing the first shared message counter, as stored in the communication center, after 
transmitting the authenticated message to the tlrst appliance. 

25. (currently amended) A system comprising: 
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a plurality of appliances including a first appliance and a second appliance; and 
an appliance communication center including: 

network connections terminating at the appliances; 

a processing circuit; 

a memory storing a plurality of shared counters including a first shared 
message counter and a second shared message counter, the first shared message counter 
shared between the appliance communication center and the first appliance, the second 
shared message counter shared between the communication center and the second appliance, 
the first shared message counter configured to provide a count separate from a count provided 
by the second shared message counter, the first and second shared message coimters 
configured to be non-resettable, the memory fiirther storing instructions for: 

maintaining at the appliance communication center the first shared message 

counter; 

generating a first authentication word by applying an appliance message, a 
shared authentication keying variable, and the first shared message counter, as stored in the 
appliance communication center, to an authentication algorithm; 

transmitting the appliance message and the first authentication word as an 
authenticated message to the first appliance;-and 

transmitting a command to chang e , within th e first applianc e , th e shar e d 
auth e ntication keying variable, wherein the shared auth e ntication k e )dng variabl e is chang e d 
by installin g install a master keying variable within the first appliance and the appliance 
communication cente r, and th e shar e d auth e ntication k e ying variabl e is us e d to generate a 
s e cond auth e ntication word configured to b e compared with the first auth e ntication word ; and 
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transmitting a command to apply the shared authentication keying variable and the 
master keying variable to the authentication algorithm to generate a new shared 
authentication keying variable . 

26. (canceled) 

27. (previously presented) The appliance communication center of claim 25, 
wherein the memory further stores instructions for incrementing the first shared message 
counter, as stored in the appliance communication center, after transmitting the authenticated 
message to the first appliance. 

28. (currently amended) A system comprising: 
a first appliance including: 

a first shared message counter; 
a processor; and 

a memory coupled to the processor, the memory storing instructions for 
execution by the processor for: 

receiving an authenticated message, including a first authentication word and 
an appliance message, at the first appliance; 

generating a second authentication word by applying the first shared message 
counter, as stored in the first appliance, a shared authentication keying variable, and the 
appliance message to an authentication algorithm; and 

comparing the first authentication word and the second authentication word to 
determine authenticity of the authenticated message; 

a second appliance separate fi*om the first appliance; and 

an appliance communication center including a second shared message counter and a 
third shared message counter, the second shared message counter shared between the 
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appliance communication center and the first appliance, the third shared message counter 
shared between the communication center and the second appliance, and the third shared 
message counter configured to provide a count separate fi-om a count provided by the second 
shared message counter, wherein the memory configured to store instructions to chang e , 
within th e first applianc e , th e shar e d auth e ntication ko\ing variable by installin g install a 
master keying variable within the first appliance and the appliance communication center, 
wherein th e shar e d — auth e ntication keying variabl e is uood to — generate th e — s e cond 
authentication word and apply the shared authentication keying variable and the master 
keying variable to the authentication algorithm to generate a new shared authenfication 
keying variable . 

29. (previously presented) The appliance message authentication device of claim 
28, wherein the memory stores instructions for execution by the processor for incrementing 
the first shared message counter, as stored in the first appliance, after receiving a genuine 
authenticated message at the first appliance. 

30. (currently amended) la an appliance communication network, a method for 
authenticating appliance messages, the method comprising: 

maintaining at a first appliance a first non-resettable shared message counter, the first 
non-resettable shared message counter shared between the first appliance and a remotely 
located appliance communication center; 

maintaining at the appliance communication center a second non-resettable shared 
message counter that counts messages communicated between the appliance communication 
center and the first appliance; 

maintaining at the appliance communication center a third non-resettable shared 
message counter that counts messages communicated between the appliance communication 
center and a second appliance, the third non-resettable shared message counter provides a 
count separate from a count provided by the second non-resettable shared message counter; 
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generating a first authentication word by applying an appliance message, a shared 
authentication keying variable, and the first non-resettable shared message counter, as stored 
in the first appliance, to an authentication algorithm; 

transmitting the appliance message and the first authentication word as an 
authenticated message to the appliance communication center;-and 

changing, within th e first applianc e , th e shar e d auth e ntication k e ying variable by 
installing a master keying variable within the first appliance and the appliance 
communication cente r, wh e r e in th e shar e d auth e ntication k e ying variabl e is us e d to g e n e rat e 
the first authentication word to authenticate the appliance message; 

applying the shared authentication keying variable and the master keying variable to 
the authentication algorithm to generate a new shared authentication keying variable: and 

authenticating the appliance message using the new shared authentication keying 
variable . 

31. (previously presented) The method of claim 30, fiirther comprising: 

receiving the authenticated message at the appliance communication center; 

applying the second non-resettable shared message counter, as stored in the appliance 
communication center, and the appliance message to the authentication algorithm to generate 
a second authentication word; and 

comparing the first authentication word and the second authentication word to 
determine authenticity of the authenticated message. 

32. (canceled) 
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